$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft File: 544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft (raw, json) Hash identifier: NSLGoM2uu49lM3nlu1CGhNwvHzCbVHv4ofL+ZG9encc= Subject key identifier: F6:43:49:6D:26:88:04:95:F5:52:D7:08:80:8F:4B:D8:EA:FD:65:9A Authority key identifier: 54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8 Certificate issuer: /CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8 Certificate serial: 54CA85F09D5075C5F85D92EE803D7D76003EC078 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft Manifest number: 42 Signing time: Thu 09 Apr 2026 18:08:49 +0000 Manifest this update: Thu 09 Apr 2026 18:03:49 +0000 Manifest next update: Fri 10 Apr 2026 19:55:49 +0000 Files and hashes: 1: 326130363a313238353a3a2f33322d3332203d3e20323036393831.roa (hash: egrN8k6Xk0Kwig5ye5zQFDYGrtcNNmET1Xfnp7uE4Hk=) 2: 326130363a313238353a646561643a3a2f34382d3438203d3e20323036393831.roa (hash: /MFLzAsvOCJeLOEWlbPKnenIdyo3QrpeZg15YJwkcZI=) 3: 544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl (hash: wWx89REWrwuUwhXy4rRtrDxFNx5qa+jIS09s4Zn2Hvo=) 4: 326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa (hash: gEq1PyQ0/WyvK1nTs6bKynEeXPOPYcgFZMOk1v3GFlk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Apr 2026 14:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ca:85:f0:9d:50:75:c5:f8:5d:92:ee:80:3d:7d:76:00:3e:c0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8 Validity Not Before: Apr 9 18:03:49 2026 GMT Not After : Apr 10 19:55:49 2026 GMT Subject: CN=F643496D26880495F552D708808F4BD8EAFD659A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cf:fa:71:84:55:e7:b3:14:f2:d9:e0:0a:27: 2a:16:54:95:dc:3d:70:ab:b9:b9:3c:5c:a0:ba:37: 93:23:6b:fa:86:3b:27:82:d3:ff:dc:eb:dc:00:57: 43:f7:83:d1:26:d7:10:e5:f8:f4:51:b7:d3:8a:8f: d9:84:b9:3e:e4:c4:8d:a6:c1:b5:f7:10:44:cd:48: c8:99:f6:2a:2a:7a:e9:1f:7d:b8:93:65:d0:e8:9c: 66:6a:33:71:62:d9:01:f8:a7:3d:60:24:27:46:5c: 2b:50:f2:26:10:4e:4d:48:cb:bf:20:01:ac:c4:6b: b5:4b:1b:e0:a8:f5:90:f0:7c:68:61:83:83:f9:94: 23:aa:2e:0f:46:e0:07:b6:bc:1d:98:23:37:94:c2: 8c:8b:25:b4:98:0a:ab:7a:be:8f:16:f9:73:84:c9: 2f:17:a8:14:47:5b:4b:79:c3:69:d0:69:82:69:ab: c8:e1:48:84:eb:8b:09:40:ac:32:9b:09:cb:cc:0a: c5:ea:d0:19:5a:eb:ef:2f:68:7b:57:46:61:40:34: 46:de:0b:fb:e1:9e:fb:f0:96:36:bc:d8:9d:ce:be: 36:b5:e5:2b:fd:8d:ca:3e:f9:60:ac:4e:03:18:59: a9:4f:4c:5b:03:c4:36:4d:30:4f:9d:98:77:24:17: 0d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:43:49:6D:26:88:04:95:F5:52:D7:08:80:8F:4B:D8:EA:FD:65:9A X509v3 Authority Key Identifier: keyid:54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e7:88:82:be:87:11:c3:1f:e3:2d:95:c5:c3:10:89:b7:9c: ce:47:b5:fa:1d:35:b8:52:40:da:b5:7b:91:40:8b:a9:46:9f: 44:22:af:67:a1:27:ef:0e:95:72:41:13:79:2e:cd:65:fe:2d: 33:b0:87:6a:7e:91:e4:68:e7:1c:23:ae:22:32:f0:8b:80:72: ed:c3:df:84:1c:b0:25:4f:5f:a1:d7:d0:b9:bf:b3:f6:fb:29: 21:38:f3:f2:c4:72:48:51:4d:48:40:ce:bb:18:8e:47:81:c8: 74:da:e3:15:0f:fd:ca:7e:cf:87:08:b2:82:70:d8:38:45:04: b3:83:7a:86:c7:bc:ef:1f:3d:38:2b:21:00:7e:bd:08:b0:92: 31:37:c3:14:a2:f0:1d:0a:6f:0b:29:96:ae:90:04:8a:7a:94: cc:6c:cf:20:70:77:66:7c:f0:9b:43:8f:3f:2d:17:df:d1:cc: d1:f1:a3:54:38:38:89:c4:53:17:bd:87:03:a9:94:ac:5d:85: af:a4:c0:bc:02:93:98:d8:2c:0d:ed:37:3c:4b:54:42:66:0e: ee:a0:ec:56:75:3b:82:e0:24:7f:cf:23:d7:dc:7f:8d:34:24: 7c:71:35:fe:bc:6d:bc:2c:46:f6:25:1c:43:21:85:ee:b2:fc: a1:69:87:5d -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUVMqF8J1QdcX4XZLugD19dgA+wHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ0QkQ1QTE5QTFDQjFBOTRFMUE0Qjc2QjBERjQ1NTVG MUJCQTFEODAeFw0yNjA0MDkxODAzNDlaFw0yNjA0MTAxOTU1NDlaMDMxMTAvBgNV BAMTKEY2NDM0OTZEMjY4ODA0OTVGNTUyRDcwODgwOEY0QkQ4RUFGRDY1OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqz/pxhFXnsxTy2eAKJyoWVJXc PXCrubk8XKC6N5Mja/qGOyeC0//c69wAV0P3g9Em1xDl+PRRt9OKj9mEuT7kxI2m wbX3EETNSMiZ9ioqeukffbiTZdDonGZqM3Fi2QH4pz1gJCdGXCtQ8iYQTk1Iy78g AazEa7VLG+Co9ZDwfGhhg4P5lCOqLg9G4Ae2vB2YIzeUwoyLJbSYCqt6vo8W+XOE yS8XqBRHW0t5w2nQaYJpq8jhSITriwlArDKbCcvMCsXq0Bla6+8vaHtXRmFANEbe C/vhnvvwlja82J3Ovja15Sv9jco++WCsTgMYWalPTFsDxDZNME+dmHckFw1VAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU9kNJbSaIBJX1UtcIgI9L2Or9ZZowHwYDVR0j BBgwFoAUVEvVoZocsalOGkt2sN9FVfG7odgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjIyZjY3YTQtZjA4NS00ZDY4LTk2ZWUtYzFiZjQ5OTI2 MjQxLzAvNTQ0QkQ1QTE5QTFDQjFBOTRFMUE0Qjc2QjBERjQ1NTVGMUJCQTFEOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTQ0QkQ1QTE5QTFDQjFBOTRFMUE0Qjc2QjBERjQ1NTVGMUJC QTFEOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mMjJmNjdhNC1m MDg1LTRkNjgtOTZlZS1jMWJmNDk5MjYyNDEvMC81NDRCRDVBMTlBMUNCMUE5NEUx QTRCNzZCMERGNDU1NUYxQkJBMUQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOeIgr6HEcMf4y2VxcMQ ibeczke1+h01uFJA2rV7kUCLqUafRCKvZ6En7w6VckETeS7NZf4tM7CHan6R5Gjn HCOuIjLwi4By7cPfhBywJU9fodfQub+z9vspITjz8sRySFFNSEDOuxiOR4HIdNrj FQ/9yn7PhwiygnDYOEUEs4N6hse87x89OCshAH69CLCSMTfDFKLwHQpvCymWrpAE inqUzGzPIHB3Znzwm0OPPy0X39HM0fGjVDg4icRTF72HA6mUrF2Fr6TAvAKTmNgs De03PEtUQmYO7qDsVnU7guAkf88j19x/jTQkfHE1/rxtvCxG9iUcQyGF7rL8oWmH XQ== -----END CERTIFICATE-----Generated at Thu Apr 9 21:00:49 2026 by rpki-client